Last updated: January 15, 2024 · Effective since: January 1, 2022
1. Introduction & Scope
Bright Home Retreat ("Bright Home Retreat," "we," "us," or "our") is a home renovation services company headquartered at 4017 Riverplace Terrace, Glen Allen, Virginia 23059, USA. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us through any channel.
This policy applies to all visitors, clients, prospective clients, and subscribers who interact with Bright Home Retreat through any channel — our website, email, phone, in-person consultations, or social media. By using our website or services, you consent to the practices described in this policy.
We comply with all applicable United States federal and state privacy laws, including the California Consumer Privacy Act (CCPA), the Virginia Consumer Data Protection Act (VCDPA), and other state privacy regulations. Where state law grants you additional rights, those rights apply regardless of where you live.
2. Information We Collect
2.1 Information You Provide Directly
We collect information you voluntarily provide when you:
- Request a consultation: First and last name, email address, phone number, project address, project type, budget range, and project details.
- Subscribe to our newsletter: Email address and, optionally, your name and ZIP code for localized content.
- Submit a contact form: Name, email, phone, subject, and message content.
- Book a service: Project address, property details, financing pre-qualification information, and signature documents.
- Communicate with us: Any information you share in emails, phone calls, text messages, or in-person meetings.
2.2 Information Collected Automatically
When you visit our website, we automatically collect:
- Device & browser information: IP address, browser type and version, operating system, screen resolution.
- Usage information: Pages visited, time spent on pages, referring website, search terms used to find us.
- Location information: Approximate location derived from IP address (city/state level, not precise GPS).
- Cookies and similar technologies: See Section 5 for details.
2.3 Information Collected from Third Parties
We may receive information about you from:
- Financing partners (credit score ranges, loan pre-qualification status — only with your explicit consent).
- Material suppliers and trade partners (relevant to your project execution).
- Public records relevant to property assessment for renovation planning.
- Social media platforms when you interact with our pages.
3. How We Use Your Information
We use the information we collect for the following business purposes:
- Service delivery: Scheduling consultations, preparing proposals, executing renovation contracts, and providing warranty service.
- Communication: Responding to your inquiries, sending project updates, and coordinating with tradespeople on your project.
- Marketing: Sending newsletters, promotional offers, and service updates — only with your consent, which you can withdraw at any time.
- Financing: Connecting you with lending partners and processing financing applications — only with your explicit authorization.
- Legal compliance: Maintaining records required by state contractor licensing boards, insurance carriers, and tax authorities.
- Service improvement: Analyzing usage patterns to improve our website, services, and client experience.
- Security: Detecting and preventing fraud, unauthorized access, and other security threats.
We do not sell your personal information to any third party. We do not share your information for cross-context behavioral advertising.
4. How We Share Information
We share your information only with the following categories of recipients, and only to the extent necessary:
- Service providers: Hosting providers, email service providers, CRM platforms, and project management tools that support our business operations.
- Trade partners: Licensed subcontractors, suppliers, and material manufacturers involved in your specific renovation project.
- Financing partners: Lenders and credit bureaus, only when you apply for financing through us and only with your signed authorization.
- Insurance carriers: To obtain certificates of insurance, process warranty claims, and verify coverage.
- Legal & regulatory authorities: When required by law, court order, or government regulation; to protect our rights, property, or safety; or to enforce our contracts.
- Business successors: In the event of a merger, acquisition, or asset sale — though we will notify you before any transfer of your personal information.
All service providers and partners are contractually bound to protect your information to standards no less protective than this policy.
5. Cookies & Tracking Technologies
Our website uses cookies and similar tracking technologies to:
- Essential cookies: Required for the website to function (session management, security, form submission).
- Analytics cookies: Help us understand how visitors use our website so we can improve it.
- Preference cookies: Remember your settings and personalize your experience.
- Marketing cookies: Only with your consent — used to measure the effectiveness of our advertising.
You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Disabling essential cookies may affect website functionality.
6. Your Privacy Rights
Depending on your state of residence, you may have the following rights regarding your personal information:
- Right to know: Request disclosure of the categories and specific pieces of personal information we collect about you.
- Right to access: Request a copy of your personal information in a portable, electronic format.
- Right to correct: Request correction of inaccurate personal information.
- Right to delete: Request deletion of your personal information, subject to legal retention requirements.
- Right to opt-out: Opt out of the sale or sharing of your personal information for targeted advertising.
- Right to limit: Limit our use of sensitive personal information.
- Right to withdraw consent: Withdraw consent for processing at any time, including newsletter subscriptions.
- Right to non-discrimination: We will not discriminate against you for exercising any privacy right.
To exercise any of these rights, contact us at info@brighthomeretreat.com or (804) 217-7960. We will verify your identity before processing requests and respond within 45 days, as required by applicable law.
7. Data Security
We implement industry-standard technical, administrative, and physical safeguards designed to protect your personal information:
- SSL/TLS encryption for all data transmitted between your browser and our servers.
- AES-256 encryption for sensitive data at rest in our databases.
- Role-based access controls limiting data access to authorized personnel with a legitimate business need.
- Regular security assessments and penetration testing by independent third parties.
- Employee training on data privacy and security, conducted annually.
- Incident response procedures with breach notification within 72 hours of discovery, where required by law.
Despite our safeguards, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to investigating and addressing any suspected breach promptly.
8. Data Retention
We retain your personal information only as long as necessary for the purposes described in this policy:
- Active client records: 10 years after project completion (state contractor licensing requirement).
- Warranty records: Duration of warranty plus 5 years.
- Newsletter subscribers: Until you unsubscribe, plus 30 days for processing.
- Marketing prospects: 3 years from last interaction, unless you request earlier deletion.
- Website analytics: 26 months (Google Analytics default retention).
- Financial records: 7 years (IRS record-keeping requirement).
When retention periods expire, we securely delete or anonymize your information.
9. Children's Privacy
Our website and services are intended exclusively for adults aged 18 and older. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us immediately at info@brighthomeretreat.com, and we will promptly delete such information.
10. Policy Changes
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will:
- Post the updated policy on this page with a revised "Last updated" date.
- Provide prominent notice on our website homepage for material changes.
- Send email notification to active clients and subscribers for significant changes affecting their rights.
- Obtain fresh consent where required by applicable law.
Your continued use of our website or services after a policy takes effect constitutes acceptance of the updated terms.
If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact our Privacy Officer:
We are committed to resolving any privacy concern promptly and in good faith. If you are not satisfied with our response, you have the right to lodge a complaint with your state's Attorney General or the relevant data protection authority.